Andy2789

Wondering if anyone can help, I have inherited a Aruba Wifi Network (3600 Controller and 105 Access Points). The Wireless was configured all wrong, so I have gone through and created 2 new SSIDs. One for school traffic and one for BYOD, on the newer controller I have specified rules on the guest SSID to prevent access to any IP except our Smoothwall. However on the 3600 controller I can find rules, but I then can't seem to specify them against a specific SSID? Am I going mad, or is my fear correct that this older generation doesn't support rules based on SSID? I have search AirHead and can only find how to do it based on the newer controllers.

Thanks everyone for their responses! Has put my mind at ease slightly that my slow and steady and build along side will work, without having to re-invent the whole environment! Much appreciated

Thank you! That was my logic, I had looked into the AD schema's and couldn't see any core ones that RM had messed with. I have already started building my own OU's way from RM in a sensible structure along with new security groups from scratch. I couldn't see it pulling anything from the existing RM setup, so had assumed that if it wasn't in anything RM. RM isn't clever enough to know that it's even there! Gradual migration and phasing out was my game plan, with a full rebuild of workstations over the Summer break. With a Apple Network and 365 I don't really want to build a new domain from scratch, I will build new DNS, DHCP, DC's and policies but the core AD I hope to retain.

I knew someone was going to say that . My added issue with that is we use Office 365 with Azure Sync, so this could turn into a monster trying to merge data both on site and in the cloud if I build a new AD.

I have recently been appointed with the responsibility of trying to turn the school network around. Currently the school is running RM CC4 which is strangling every element of the system and causes outages randomly. Staff and students are completely disengaged with IT as they have zero trust in the reliability of the network, which in 2018 is somewhat of an issue! This isn't my first rodeo taking a failing network and having to turn it around, however this is my first contact with RM... and my last! I have ordered new servers, as there is zero virtualisation and the highest spec'd server currently has 4GB of RAM. Which is meant to be providing an infrastructure to 1100 users... RM have been given notice of termination and I am in the process of building a new vanilla network without RM, I have built all my Group policies and starting to build my new server environment. Does anyone have any top tips, or secrets I need to be aware of? All Servers that currently have RM on will be removed from the environment with new DC's taking over. However does RM leave anything behind or effect Active Directory in anyway?

How strange, we have exactly the same setup as you. Unifi Wifi, Smoothwall UTM and Server 2012 R2. My mobile and other senior leaders have Apple devices running IOS11, we don't experience any issue at all. Is Smoothwall acting as a Radius server for you?

Yup, dead again!

We have purchased RDPGuard, following a successful brute force attack. Works wonders, we have tailored the settings and almost removed all failed login attempts. We run it on any web facing server, even though we have the firewall set high and filter out a lot of IP's. I am somewhat nervous of a repeat!

And it's back!

Yeah, we died this morning. I have emailed but as yet no reply! Let's hope it's a half day outage and not a repeat of last time!

Yeah, we have a problem when going through the login process they put all the details in and press update. Then it just sits there, only way we found around that for those is to do it as an admin! Which isn't ideal. The loss of the search bar at the top is making life a challenge for admins to replicate problems by looking at classes or kids. Great shame, as it seems to be going from bad to worse at the moment.

We use it for the full Safeguarding package, we combine the captures with information from our Smoothwall report to get an overall picture on devices. We have finally got the safeguarding function working on our Mac's now as well. More than happy to give any pointers if needed. We have tweaked the default capture list to deal with the number of false positives, which so far is working really well for reducing my workload in trawling every week the captures and discussing these with students / parents.

I go YOE, then you aren't moving things around all the time. We just have a table on our board in the office that each year we move the numbers along one next to the year groups so we know. Then you aren't messing about with moving students, as sometimes students are held back a year and things start to get messy!

We recently went it alone with our broadband. We went with Smoothwall for our filtering and firewall through an S8 appliance. Smoothwall were really good and worked with us on the price, which gave us a great solution.

Did anyone get an email from Tom in the end? I received nothing and I am going to drop him an email. But I just wanted to know if anyone else has before I moan.

I originally thought permissions but it's to do with Office trying to contact Office 365 servers, we had to add exceptions in for the address it was trying to get to. Opening Internet Explorer obviously authenticates with the upstream Proxy which then gives Office the connection it wants. Office can't trigger the authentication itself so instead decides it won't do anything, we had it for 2 years real pain!

Are you using Proxy authentication or anything like that? NTML or Kerberos?

What internet filtering are you using? Believe it or not, finally after nearly 2 years we found the answer to be being caused by Smoothwall. This only got fixed 2 days ago!

I am hoping somebody can help before I launch 100 Mac's out of the window. We recently upgraded all our Mac's and the server onto Maverick, everything appears to work fine. As we know in recent released AD Network homes Map onto the dock now rather than the 'House' Home. However my students appear to be struggling with this as saving work means saving to the Mac and then dragging onto the Dock as there is no direct method of getting to the share. Is there a way of mapping the users AD Network home to the Desktop? I have seen some scripts knocking about, however my issue is the students homes are broken down into server\studenthome\yeargroup\Username so a single script wouldn't work. There are so many Plists on the student group on the Apple server to risk breaking them into sub groups. Or could I use one of the scripts with several entries and it not to show an error message? Or does somebody have the answer to my prayers! Any help gratefully received on this!

We have thesame issue that it is definitely something in their roaming profiles, youdelete their profile and first login they are fine. As soon as they log off andon again the problem comes back!

Hi Stich No sadly we still have the same problem, it is intermittent at the moment and found if you open Internet Explorer up the problem goes away. We can’t work out the link between them! Or how to fix it, it’s driving us mad!

We are having exactly the same problem did you ever find a solution to this? It started with a few users now it is effecting a large proportion and we can't work out why it is happening!

Yeah I was looking at ThinKiosk to connect to the RDS, however I can't work out how to point it at the server address and not a URL or do you have to point it using Citrix Reciever?

Ahhh that makes sense, feel this is going to take a bit of time to get right. So I now have option of Windows Thin Client attaching to the RDS or WES 7. That brilliant, more food for thought!

Reading James, article using Windows Thin PC looks like an option to force the macine to connect to a RDS session to which a user signs in. Which looks very interesting